Legal compliance when launching
I've a project I'm looking to launch next month but am concerned about complying with the law.
My app takes the standard user login information (name, email, and password) and also stores a lot of personal and private data. This data will be encrypted in the browser and stored in the database encrypted but the user's name and email will not.
I'm concerned about the legal implications of (upon launch):
a) Complying with Data Laws ( I'm in the EU).
b) Ramifications if data is lost / stolen.
How does everyone else deal with this? Do these laws apply to startups?
Capturing personal data places a lot of responsibility on SaaS companies.
Being compliant means that your company meets a certifying set of standards and policies, which involves data usage and protection of your customers’ data.
Being compliant will also seed trust with customers and potential clients, helping to grow your brand.
Work through our SaaS audit checklist to become a privacy-compliant business: https://bit.ly/3lqeM2D
So no one has any input on this?